coulomb/sand-boxer
2
0
Fork 0
generated from coulomb/repo-seed
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
44 Commits 1 Branch 0 Tags
92eaf8bae5a059ab9a82964b2cf0e0f4831f5d73
Commit Graph

44 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tegwick
92eaf8bae5 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:54:51 +02:00
tegwick
1f87be4c6b feat: reachability and consumer profiles (SAND-WP-0011) 
Add reachability enrichment (tunnel metadata, ops-bridge pointer),
secret_refs boundary resolution, profile.agent-dev and profile.build,
CLI reachability show, API endpoint, consumer smoke scripts, and tests.
 2026-06-24 12:54:27 +02:00
tegwick
7cabf77fb6 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:50:47 +02:00
tegwick
15f031fd65 feat: cloud adapters E2B/Modal and billing export (SAND-WP-0010) 
Add credentialed E2B and Modal extensions, burst routing fallback,
fin-hub meter export hook, BYOK docs, and 77 tests.
 2026-06-24 12:50:19 +02:00
tegwick
6d0a1a8b1e chore: sync SAND-WP-0010–0012 State Hub IDs 2026-06-24 12:48:07 +02:00
tegwick
878aa6a451 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:47:55 +02:00
tegwick
5466330cf4 docs: add workplans SAND-WP-0010–0012 for remaining gaps 
Cloud adapters (E2B/Modal/BYOK/fin-hub), reachability and consumer
profiles, Packer orchestration; update gap analysis and SCOPE.
 2026-06-24 12:47:08 +02:00
tegwick
151fc41299 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:44:30 +02:00
tegwick
df658e7ef9 feat: TTL enforcement and operational hardening (SAND-WP-0009) 
Add TTL parser, expires_at on create, extend_ttl and expire/reap APIs,
activity-core integration doc, repo classification, registry refresh,
HTTP parity, and 69 tests.
 2026-06-24 12:44:04 +02:00
tegwick
b58191b23e chore: sync SAND-WP-0009 State Hub IDs 2026-06-24 12:38:40 +02:00
tegwick
0fb799fa4e chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:38:26 +02:00
tegwick
ee304f313d docs: post-WP-0007 gap analysis and SAND-WP-0009 workplan 
Assess remaining INTENT gaps after snapshots; propose TTL enforcement,
platform hygiene, and HTTP parity as the next implementation track.
 2026-06-24 12:36:56 +02:00
tegwick
cd746cff77 docs: refresh SCOPE.md for v0 post SAND-WP-0007 
Reflect finished workplans 0001–0008, full profile/extension catalog,
routing/payments/snapshots surface, 54 tests, and current gaps.
 2026-06-24 08:01:18 +02:00
tegwick
67f1a3a565 chore: sync SAND-WP-0007 State Hub IDs 2026-06-24 07:58:00 +02:00
tegwick
952cebf2e9 feat: snapshot/restore checkpoints (SAND-WP-0007) 
Add workspace checkpoint API with SnapshotStore, extension hooks on
compose-ssh and saas-stub, manager orchestration, CLI/HTTP surface,
profile.compose-checkpoint, and docs/tests.
 2026-06-24 07:57:40 +02:00
tegwick
2760ef2373 Sync State Hub workstream IDs for SAND-WP-0006 2026-06-24 07:52:45 +02:00
tegwick
1415e17230 Implement SAND-WP-0006: SaaS payments, routing, and ext.saas-stub 
Add credits store, metering on create/destroy, extension routing resolver,
metered SaaS stub extension, burst/saas profiles, credits CLI, docs, and tests.
 2026-06-24 07:52:20 +02:00
tegwick
eee336149e Sync State Hub workstream IDs for SAND-WP-0005 2026-06-24 01:47:50 +02:00
tegwick
cec0fc6348 Implement SAND-WP-0005: extension SDK and ext.vm-packer 
Add SandboxExtension base class, extension SDK docs, vm-packer attach mode
for build-machines VMs, profile.vm-haskell-build, SSH port support, tests,
and migration docs.
 2026-06-24 01:47:07 +02:00
tegwick
c8126672ee chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
 2026-06-23 21:44:27 +02:00
tegwick
1594bceec1 Finish SAND-WP-0004: mark e2e-framework migration arc complete 
Update migration-gaps, SCOPE, and workplan status after the-custodian
make e2e shim delegates to validate run.
 2026-06-23 21:43:53 +02:00
tegwick
d6afe0e27b Sync State Hub workstream IDs for SAND-WP-0003 and SAND-WP-0004 
fix-consistency writeback: state_hub_workstream_id and task IDs.
 2026-06-23 21:41:24 +02:00
tegwick
9757ce0c7d chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
 2026-06-23 21:41:14 +02:00
tegwick
6473fa78d7 Update SCOPE, gap analysis, and propose SAND-WP-0004 
Refresh SCOPE.md for v0 operational state after WP-0002/0003/0008.
Add history/ INTENT↔SCOPE assessment and ready workplan for the-custodian
e2e shim to close the e2e-framework migration arc.
 2026-06-23 21:40:43 +02:00
tegwick
e7d31b7f55 Finish SAND-WP-0003: wise-validator extraction workplan 
Add workplan, update migration-gaps delivered table, and extend sand-boxer
e2e.yml with health check for validate run self-smoke.
 2026-06-23 21:37:08 +02:00
tegwick
9054d33e46 Clarify INTENT.md: sand-boxer self-sufficiency and sibling boundaries 
Document that sand-boxer is self-sustained without wise-validator, that
validation is an optional downstream consumer, and update near-term outcomes
to reflect completed SAND-WP-0002 work.
 2026-06-23 21:23:39 +02:00
tegwick
45029ec66f chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
 2026-06-23 19:54:02 +02:00
tegwick
c0a9261cdc Implement SAND-WP-0008: host telemetry and self-canary 
Add profile.sandbox-canary, HostSnapshot/inventory/stale schemas, SSH
collectors, before/after provision deltas, telemetry export to State Hub
and local JSON, default `sandboxer create` self-deploy, inspect/reap-stale
CLI, runbook, and CoulombCore verification (26 tests pass).
 2026-06-23 19:53:51 +02:00
tegwick
582c1dd3c6 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
 2026-06-23 16:52:40 +02:00
tegwick
8e0465865a Finish SAND-WP-0002: remote smoke, podman-compose, HTTP stub 
- T10 smoke passed on CoulombCore (sand-boxer self-deploy, sandbox 4e542c51)
- Add e2e smoke compose, scripts/smoke-compose-e2e.sh, make smoke-remote
- Support SANDBOXER_COMPOSE_CMD for podman-compose hosts
- FastAPI v0 stub at sandboxer.api.app; migration gaps doc
- Mark workplan finished (all 10 tasks done)
 2026-06-23 16:52:29 +02:00
tegwick
380034c911 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
 2026-06-23 14:25:23 +02:00
tegwick
20e25726d7 Add SAND-WP-0008: host telemetry and self-canary introspection 
Workplan for default sand-boxer self-deploy, before/after host metrics,
stale sandbox inventory, and telemetry export for centralized analysis.
 2026-06-23 14:25:05 +02:00
tegwick
939c4e1aff Fix SSH auth: respect ~/.ssh/config instead of defaulting to root 
CoulombCore (92.205.130.254) authenticates as tegwick via id_ops in
ssh config, not root. Omit SANDBOXER_SSH_USER to let OpenSSH apply config;
set SANDBOXER_SSH_USER only to override.
 2026-06-23 14:16:16 +02:00
tegwick
8a39eaba34 Add make install for global sandboxer CLI 
Document uv tool install path and uv run fallback so sandboxer is
available outside the project venv after make install.
 2026-06-23 13:55:38 +02:00
tegwick
06cc6f9466 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-22:
  - update .custodian-brief.md for sand-boxer
 2026-06-22 23:27:50 +02:00
tegwick
d6d3155792 Implement SAND-WP-0002 meta-framework foundation (T01–T09) 
Add meta-framework spec, pydantic schemas, profile/extension YAML, extension
registry, ext.compose-ssh backend, SandboxManager with State Hub events, CLI
commands, integration docs, capability registry entry, and compose-e2e runbook.
Nine unit tests pass. T10 remote smoke test remains for operator.
 2026-06-22 23:27:31 +02:00
tegwick
b0a57cf9d3 Complete SAND-WP-0001: bootstrap Python dev workflow 
Scaffold sandboxer package (src layout, typer CLI stub, pytest, ruff),
Makefile targets, and document install/test/lint/build commands in
AGENTS.md and stack-and-commands.md. Mark bootstrap workplan finished.
 2026-06-22 23:25:42 +02:00
tegwick
1ec00d52b8 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-22:
  - update .custodian-brief.md for sand-boxer
 2026-06-22 23:24:06 +02:00
tegwick
d12ff9a7f4 chore: write State Hub workstream and task IDs from fix-consistency 
Sync workplan frontmatter with hub DB after SAND-WP-0001 and SAND-WP-0002
registration.
 2026-06-22 21:32:58 +02:00
tegwick
cdc0e505a9 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-22:
  - update .custodian-brief.md for sand-boxer
 2026-06-22 21:32:44 +02:00
tegwick
f33cff5363 docs: charter meta-framework vision, research, and SAND-WP-0002 
Rewrite INTENT.md as the sand-boxer meta-framework charter (OpenRouter-style
sandbox API, extensions, payments, Coulomb sibling boundaries). Add research
under research/, update SCOPE.md, bootstrap workplans SAND-WP-0001/0002, and
State Hub integration files from the bootstrap pass.
 2026-06-22 21:32:32 +02:00
tegwick
e248f669a3 docs: add initial INTENT.md for sand-boxer 
Charter the repo as Custodian execution isolation: sandbox profiles,
dedicated hosts (sandboxer01), and migration path from the-custodian
e2e-framework and build-machines patterns.
 2026-06-21 23:04:34 +02:00
Bernd Worsch
dc76d8742e Update README.md 2026-06-21 21:00:33 +00:00
Coulomb Social
7d8f6cae3c Initial commit 2026-06-21 21:00:12 +00:00